Monday, June 10, 2013

GVRP,VTP protocol and Trunk technology.GVRP=VTP

GVRP, VTP protocol and Trunk technology


GVRP, VTP protocol and Trunk technology among many similarities: they all belong to the second floor agreement or Layer; in these three specific configuration commands, involving most aspects of the configuration VLAN configuration is; three wide range of applications are designed to streamline the network maintenance personnel to configure and manage network devices, for frequent and extensive use of the command. But between them, they are fundamentally different, following on the three examples, respectively, its comprehensive introduction.
One, GVRP on the switch application in H3C
GVRP (GARP VLAN Registration Protocol, GARP VLAN Registration Protocol) is a GARP (Generic Attribute Registration Protocol, Generic Attribute Registration Protocol) for an application. GARP applications include GMRP and GVRP, which GMRP (GARP Multicast Registration Protocol, GARP Multicast Registration Protocol) is based on a GARP Multicast Registration Protocol. Used to maintain the switch multicast registration information. While maintaining device GVRP dynamic VLAN registration information and propagates the information to other devices.
GVRP enabled device can receive data from other devices VLAN registration information, and dynamically update the local VLAN registration information, including the current VLAN members, ports through which the VLAN members can be reached. It thus ensures that local VLAN registration information to other devices communication so that all the devices within the same LAN VLAN information. VLAN registration information propagated by GVRP includes both manually configured local static registration information, but also from other devices dynamic registration information. Here's an example introduction through GVRP protocol on the application of the H3C switch.













Figure 1 three H3C S3100 switch twenty-two Internet icon

Shown in Figure 1, three switch models are H3C S3100-52TP-SI, twenty-two interconnection. The connections between the devices are as follows:

1.  S3100-A Eth 1/0/1 < ----- > S3100-B Eth 1/0/1 
2.  S3100-B Eth 1/0/2 < ----- > S3100-C Eth 1/0/1 
3.  S3100-C Eth 1/0/2 < ----- > S3100-A Eth 1/0/2

In the configuration on S3100-A:

1.  [S3100-A] gvrp 
2.  / / Enable GVRP globally, by default, the global GVRP is disabled 
3.  [S3100-A] interface ethernet 1/0/1 
4.  [S3100-A-Ethernet1/0/1] port link-type trunk 
5.  [S3100-A-Ethernet1/0/1] port trunk permit vlan all 
6.  [S3100-A] interface ethernet 1/0/2 
7.  [S3100-A-Ethernet1/0/2] port link-type trunk 
8.  [S3100-A-Ethernet1/0/2] port trunk permit vlan all 
9.  / / The two Ethernet ports Ethernet1/0/1 and Ethernet1/0/2 as a Trunk port and allows all VLAN through 
10.[S3100-A-Ethernet1/0/1] gvrp 
11.[S3100-A-Ethernet1/0/2] gvrp 
12./ / In the two functions enable GVRP on the Trunk port, by default port GVRP is disabled 

13.[S3100-A] vlan 2 
14./ / Configure static VLAN2 
15.In the configuration on S3100-B: 
16.[S3100-B] gvrp 
17./ / Enable GVRP globally 
18.[S3100-B] interface ethernet 1/0/1 
19.[S3100-B-Ethernet1/0/1] port link-type trunk 
20.[S3100-B-Ethernet1/0/1] port trunk permit vlan all 
21.[S3100-B] interface ethernet 1/0/2 
22.[S3100-B-Ethernet1/0/2] port link-type trunk 
23.[S3100-B-Ethernet1/0/2] port trunk permit vlan all 
24./ / The two Ethernet ports Ethernet1/0/1 and Ethernet1/0/2 as a Trunk port and allows all the VLAN. 
25.[S3100-B-Ethernet1/0/1] gvrp 
26.[S3100-B-Ethernet1/0/2] gvrp 
27./ / In the two Enable GVRP on the Trunk port function 
28.[S3100-B-Ethernet1/0/2] gvrp registration fixed 
29./ / Configure port registration mode is Fixed, default, GVRP port registration mode to Normal 
30.[S3100-B] vlan 3 
31./ / Configure static VLAN3 
32.In the configuration on S3100-C: 
33.[S3100-C] gvrp 
34./ / Enable GVRP globally 
35.[S3100-C] interface ethernet 1/0/1 
36.[S3100-C-Ethernet1/0/1] port link-type trunk 
37.[S3100-C-Ethernet1/0/1] port trunk permit vlan all 
38.[S3100-C] interface ethernet 1/0/2 
39.[S3100-C-Ethernet1/0/2] port link-type trunk 
40.[S3100-C-Ethernet1/0/2] port trunk permit vlan all 
41./ / The two Ethernet ports Ethernet1/0/1 and Ethernet1/0/2 as a Trunk port and allows all the VLAN. 
42.[S3100-C-Ethernet1/0/1] gvrp 
43.[S3100-C-Ethernet1/0/2] gvrp 
44./ / Enable GVRP on the Trunk port function 
45.[S3100-C-Ethernet1/0/1] gvrp registration forbidden 
46.[S3100-C-Ethernet1/0/2] gvrp registration forbidden 
47./ / Configure the two ports are Forbidden registration mode 
48.[S3100-C] vlan 4 
49./ / Configure static VLAN4



hese three H3C configuration commands on the switch looked like the same, but in fact in the most critical areas will have subtle differences. Mainly in the configuration port registration mode, three ports on the switch configuration is not the same. S3100-A of the two ports is no special configuration register mode, but is used by default Normal mode, so the S3100-A of Ethernet1/0/1 and Ethernet1/0/2 port registration mode is Normal; S3100-B on Ethernet1/0/1 no special configuration register mode, so it is also the Normal mode, and S3100-B of Ethernet1/0/2 port registration mode configuration into Fixed mode; S3100-C became a two-port configuration on Forbidden mode. So that several ports in the actual operation, the propagation of VLAN mechanism will vary.
You can use the command "display vlan dynamic" to see the validation of each port operating mechanism, the dynamic parameters of the command is to display the system dynamically created VLAN number and number, dynamic VLAN through GVRP is generated under or through Radius server hair VLAN. Below is performed separately on all three switches "display vlan dynamic" display results:
1.  [S3100-A] display vlan dynamic  
2.  Now, the following dynamic VLAN exist (s):  
3.  
4.  / / Display the S3100-A dynamic VLAN information on  
5.  [S3100-B] display vlan dynamic  
6.  Now, the following dynamic VLAN exist (s):  
7.  
8.  / / Display the S3100-B dynamic VLAN information on  
9.  [S3100-C] display vlan dynamic  
10.Now, the following dynamic VLAN exist (s):  
11.No dynamic vlans exist!  
12./ / Display the S3100-C dynamic VLAN information on 
The output from the above results can be seen, S3100-A and S3100-B can be exchanged between the two switches are created VLAN, this is because the Ethernet1/0/1 S3100-A and S3100-B's Ethernet1 / 0 / a port of registration mode is Normal mode, this mode allows the port to dynamically register and propagate dynamic and static VLAN information. But in the S3100-A and S3100-B is not visible on the two switches S3100-C switch created VLAN 4, while S3100-C, also see S3100-A and S3100-B VLAN created two switches 2 and VLAN 3 information, this is because although respectively S3100-A and S3100-B's Ethernet1/0/2 port configured on Normal and Fixed mode, but the S3100-C two ports registered patterns are Forbidden, so the S3100 -C and the other between the two switches will not exchange all outside except VLAN 1 VLAN information. Port GVRP registration mode has the following three:
Normal mode: Allows the port to dynamically register and deregister VLAN, dynamic and static VLAN propagate information.
Fixed Mode: Disables the port to dynamically register and deregister VLAN, only propagate a static VLAN information is not propagated dynamic VLAN information. That is set to Fixed mode Trunk port allows all VLAN even pass through a VLAN can only be manually configured that part.
Forbidden Mode: Disables the port to dynamically register and deregister VLAN, VLAN1 does not propagate anything other VLAN information. That is configured to Forbidden - Trunk port even allows all VLAN to pass through a VLAN can only be VLAN1.
In addition, through a number of "display gvrp" command to display GVRP configuration, operation, or view the display and verify the configuration. Command is as follows:
1.  [H3C-S3100] display gvrp status  
2.      / / Display the global GVRP status information  
3.  [H3C-S3100] display gvrp statistics [interface interface-list]  
4.      / / Display the GVRP statistics  
5.      [H3C-S3100] display gvrp state interface interface-type interface-number vlan vlan-id   
6.      / / Display the GVRP state machine information      
7.  [H3C-S3100] display gvrp vlan-operation interface interface-type interface-number  
8.      / / Display current information about dynamic VLAN operations 








No comments:

Post a Comment

Optimization of fortigate IPS

IPS signature need select according to infrastructure environment  Eg:-  if  we are not have Linux servers this ips signature can disable (d...